What Microsoft's documentation says
The Microsoft Learn page on Pluton as a TPM says that beginning with 2026 silicon, Pluton no longer serves as the TPM on AMD and Qualcomm platforms. It adds that on these platforms, as well as on Intel, TPM 2.0 functionality is instead delivered through the vendor's firmware TPM (fTPM) or a discrete TPM.
The Intel wording is narrower than the headlines suggest. Microsoft names AMD and Qualcomm as the platforms where Pluton stops being the TPM. It then says Intel platforms also get their TPM from fTPM or a discrete TPM. It does not say Intel previously shipped Pluton as its system TPM and is now switching away. Neowin's report lumps all three vendors together, but the documentation supports the narrower reading.
The page's own metadata shows it was last updated on September 16, 2026. The Pluton overview page was last updated on May 27, 2026. Neowin says the documentation changed "earlier this year" but doesn't give the exact date the wording appeared. "Quietly" fits in that Microsoft didn't announce the change prominently. It is also a documented change on an official page.
What isn't changing
- Existing PCs. Devices built on 2025 or earlier AMD and Qualcomm silicon that ship with Pluton configured as the TPM remain fully serviced and supported.
- Scope. This change applies only to new silicon platforms introduced in 2026 and later.
- Pluton itself. This change affects only Pluton's TPM functionality, and the processor will continue to be present and supported on existing and future Windows devices.
- TPM 2.0 as a requirement. The replacement is another TPM 2.0 implementation, not the absence of one. Microsoft's page doesn't say BitLocker, Windows Hello or System Guard lose TPM support.
Pluton and the TPM are separate roles
Microsoft's overview describes Pluton as a security processor with several capabilities, and TPM is only one of them. Device manufacturers can use a discrete TPM or a firmware TPM as the system TPM, while keeping Pluton available to the system for use cases beyond the TPM.
Microsoft's overview says Pluton provides a hardware root of trust, secure identity, secure attestation and cryptographic services. It also says Pluton firmware is stored in motherboard SPI flash. At Windows startup, the operating system uses the newest Pluton firmware, including a version from Windows Update where one is available. That update model is about Pluton firmware and doesn't explain the TPM change.
The security argument Microsoft made for Pluton as a TPM is also unchanged. Neowin notes that Pluton was pitched as extra chip-level protection because discrete TPMs have been found vulnerable to bus interface sniffing attacks. Microsoft's page says that where Pluton is the TPM, credentials, encryption keys, and other sensitive information can't be easily extracted even with physical possession of the device. Those are Microsoft's claims, not independent test results.
What an fTPM is
Intel's support documentation describes Platform Trust Technology (PTT) as an integrated TPM that adheres to the 2.0 specification. It offers the same capabilities as a discrete TPM but lives in system firmware. Intel says systems on 8th Generation or later Core processors have PTT. It also warns that a PC maker may have turned the TPM off in firmware, so it may need enabling.
That is general background on what an fTPM is. It doesn't describe how any particular 2026 Intel, AMD or Qualcomm PC is configured.
The unanswered question: why
Neowin says Microsoft did not explain the change and that it has asked the company for comment. The Learn page documents the change and its boundaries but gives no rationale. Cost, certification, vendor preference, performance or security trade-offs are all plausible guesses. None is supported by the evidence, so none should be treated as Microsoft's reason.
There is a coherent technical reading of the arrangement, but it is my own analysis. Keeping the system TPM with the silicon vendor's fTPM or a discrete TPM, while Pluton stays available for other security uses, separates two jobs that were previously combined. The documentation doesn't say whether that was the goal.
Practical guidance
The documentation doesn't ask anyone to change settings, and nothing suggests disabling Pluton. A conservative approach for administrators and buyers:
- Don't assume Pluton means TPM. On 2026-and-later platforms, a "Pluton" label doesn't tell you where the TPM comes from. Check the manufacturer's specification sheet for the exact model.
- Check the TPM status on the PC itself. The documentation says a device ships with an fTPM or a discrete TPM. It doesn't say which one a given model uses.
- Back up recovery keys before changing TPM settings. Some firmware offers a choice of TPM source. A third-party explainer from Safeguard.sh warns that switching the TPM source gives the operating system a different TPM, and keys sealed to the old one will not unseal on the new one. Back up BitLocker recovery keys first. This warning is from that explainer, not Microsoft's page. Microsoft's page doesn't discuss firmware TPM-source toggles at all.
- Don't expect legacy fleets to change. Existing AMD and Qualcomm devices with Pluton as the TPM stay supported.
Open questions for enterprises
Microsoft's Pluton overview uses device-based conditional access as an example. Intune checks device health, and a TPM's tamper-resistant logs can show that a device is healthy. The page says that where Pluton is the TPM, customers using conditional access get the benefit of Pluton's tight integration with Microsoft services.
For new 2026 hardware, that integration won't come from Pluton acting as the TPM. Microsoft doesn't say whether conditional-access workflows change in practice. It doesn't say the TPM source breaks them either. The documentation doesn't answer this, and mixed fleets of older Pluton-as-TPM machines and newer fTPM machines are where an admin might look for differences.
Which processors are affected
Microsoft's overview lists Pluton-capable chipsets, but the list isn't a map of the 2026 TPM change. It includes AMD Ryzen 6000, 7000, 8000, 9000 and Ryzen AI, Intel Core Ultra 200V, Ultra Series 3 and Series 3, and Qualcomm Snapdragon 8cx Gen 3 and Snapdragon X. The documentation names no specific 2026 processor or PC model for the TPM change, so I won't guess which models it applies to.
The bottom line
- Microsoft's documentation confirms that from 2026 silicon, Pluton no longer serves as the TPM on AMD and Qualcomm platforms.
- On those platforms and on Intel, TPM 2.0 comes from the vendor's fTPM or a discrete TPM.
- Pluton itself continues, and existing 2025-or-earlier AMD and Qualcomm devices configured with Pluton as TPM stay supported.
- Microsoft hasn't said why. For now, treat the Intel part of the story carefully and check each model's TPM implementation rather than assuming it.